Grant some permissions to anonymous users for onfstaff-private jobs

To discover (force redirect to login page instead of 404) and view
status (to use build states badged in project pages).

Also, set fabric-tna-postmerge job to run nightly, to make sure the
status of master is always up-to-date (e.g., if a PR-triggered job
fails be cause of transient errors)

Change-Id: I3f7ee86b37238fe8e7e0acb6c874ddafb5409697
diff --git a/jjb/onf-macros.yaml b/jjb/onf-macros.yaml
index 6d2145a..f4e3645 100644
--- a/jjb/onf-macros.yaml
+++ b/jjb/onf-macros.yaml
@@ -86,7 +86,9 @@
                 <permission>hudson.model.Run.Replay:JenkinsPowerusers</permission>
                 <permission>hudson.model.Run.Update:JenkinsPowerusers</permission>
                 <permission>hudson.model.Item.Discover:ONFStaff</permission>
+                <permission>hudson.model.Item.Discover:anonymous</permission>
                 <permission>hudson.model.Item.Read:ONFStaff</permission>
+                <permission>hudson.model.Item.ViewStatus:anonymous</permission>
               </hudson.security.AuthorizationMatrixProperty>
 
 # trigger on gerrit patchsets and actions
diff --git a/jjb/templates/fabric-tna-jobs.yaml b/jjb/templates/fabric-tna-jobs.yaml
index 8192e60..70203ef 100644
--- a/jjb/templates/fabric-tna-jobs.yaml
+++ b/jjb/templates/fabric-tna-jobs.yaml
@@ -100,6 +100,7 @@
     triggers:
       - onf-infra-github-pr-trigger-merge:
           project: '{project}'
+      - timed: "@midnight"
 
     wrappers:
       - lf-infra-wrappers: